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Abstract 

We  address  l  lie  problem  of  generating  test  sequences  for  sluck-at  faults 
in  non-scan  synchronous  sequential  circuits.  We  present,  a  novel  lest 
procedure  that  exploits  both  the  structure  of  the  combinational  logic 
in  the  circuit  as  well  as  the  sequential  behavior  of  the  circuit-.  In  con¬ 
trast  to  previous  approaches,  we  decompose  the  problem  of  sequential 
test  generation  into  tin tc  subjnvblf  vis  of  combinational  test  generation, 
fault-free  staff  justification  and  fault-frre  state  differentiation.  We  de¬ 
scribe  fast  algorithms  for  state  justification  and  state  differentiation  us¬ 
ing  the  OiWsets  and  OFF-sets  of  flip-flop  inputs  and  primary  outputs. 
The  decomposition  of  the  testing  problem  into  three  subproblems  rather 
than  the  t  raditional  two.  performing  t  lie  justification  and  differentiation 
steps  on  the  fault-free  rather  than  the  faulty  machine  and  the  use  of  eifi- 
cicnt  techniques  for  cube  intersection  results  in  significant  performance 
improvements  over  previous  approaches. 

1  Introduction 

Test  generation  for  sequential  circuits  lias  been  recognized  as  a  difficult 
problem  [8]  [5]  [12].  Initial  work  in  tackling  this  problem  involved  the 
use  of  both  random  [4]  (15)  and  deterministic  techniques  [llj  [10]  [13] 
[16],  Due  to  the  relative  ineffectiveness  of  these  approaches,  a  popular 
approach  to  enhancing  the  testability  of  sequential  circuits  has  been  the 
Scan  Design  methodology  [C]  [I]. 

Recently,  there  lias  been  considerable  progress  made  in  this  area.  A 
PODEM-based  [7]  deterministic  approach  to  sequential  test  generation 
was  described  in  [9].  Tliis  approach  uses  the  iterative  array  model  for 
test  generation  and  makes  intelligent  use  of  a  partial  State  Transition 
Graph  (STG)  of  the  circuit  while  generating  justification  sequences  for 
the  faults  under  lest.  A  heuristic,  simulation-based  test  pattern  gener¬ 
ation  algorithm  was  described  in  [2].  Both  these  approaches  have  been 
successful  in  generating  tests  for  circuits  with  1000-2000  gates  and  50-75 
flip-flops. 

In  contrast  to  previous  approaches,  the  approach  we  present  ill  this 
paper,  involves  decomposing  the  problem  of  sequential  test  generation 
into  three  suhpivblems  of  combinational  leal  generation,  fault-free  state 
justification  and  fault-free  state  differentiation.  Initially,  prior  to  test 
generation,  each  of  the  flip-flop  inputs  (next  state  lines)  and  primary 
outputs  are  represented  as  separate  cone  circuits  and  complete  or  par¬ 
tial  sum-of-product  representations  of  the  ON/OFF-sets  of  these  cone 
circuits  are  extracted.  The  extraction  is  carried  out  via  the  use  of  the 
PODEM  algorithm.  Cover  extraction  is  significantly  faster  than  STG 
enumeration,  which  is  used  in  [9]. 

Given  a  fault  for  which  a  test  sequence  has  to  be  generated,  we  first 
generate  a  combinational  test  vector  that  propagates  the  effect  of  the 
fault  to  the  next  stale  lines  or  the  primary  outputs.  We  then  perform  a 
justification  step,  which  involves  finding  a  justification  sequence  for  the 
state  corresponding  to  the  generated  test  vector.  This  step  is  carried 
out  efficiently  via  a  sequence  of  cube  intersections  on  the  complete  or 
partial  ON/OFF-sel  representations  of  the  next  stale  lines.  Thus,  a 
fault-free  justification  sequence  is  found.  If  the  effect  of  the  fault  has 
been  propagated  to  the  next  state  lines  alone,  then  we  obtain  the  fnnltg 
fault-fire  state  pair  produced  by  the  test  vector.  We  obtain  n  fault- 
free  different iat  ion  or  distinguishing  sequence  for  this  faulty  fault-free 
state  pair  via  another  sequence  of  cube  intersections,  this  time  on  the 
ON/OFF-set  representations  of  the  primary  outputs. 

Justification  or  differentiation  sequences  that  are  valid  in  a  fault-free 
machine  are  not  necessarily  valid  in  the  faulty  machine.  However,  erper- 
t  me  lit  at  ton  indicates  that  these  stqnences  are  either  valid  or  themselves 
test  sequences,  more  than  95%  of  the  time.  Fault-free  justification  and 
differentiation  can  be  performed  much  more  efficiently  than  the  same 
under  faulty  conditions  since  information  ran  he  reused.  Further,  the 
intersection  of  sum-of-product  forms,  which  forms  the  basis  for  justifica¬ 
tion  and  differentiation,  can  be  performed  efficiently,  via  sophisticated 
data  structures.  Splitting  the  sequential  test  generation  problem  into 
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three  subprobiem*  rather  I  ban  tin*  I  radii  tonal  two.  also  improves  etli- 
ci«*nry.  Pplo  a  factor  of  iiuprovein«Mil  in  performance  has  been 
achieved  for  large  sequential  machines,  owr  previous  approaches. 

We  present  basic  definitions  in  Section  2.  In  Section  .'J.  the  three- 
step  global  strategy  for  test  generation  is  descrilied.  The  algorithms 
used  in  the  cover  enumeration  and  roinhiual ioual  lest  generation,  stair 
jiistiflralioii.  and  differentiation  steps  are  described  in  Sections  t.  !».  and 
(3  respectively.  Detection  of  redundant  faults  is  (he  subject  of  Section  7. 
In  Section  8.  we  present  preliminary  experimental  results,  that  indicate 
that  this  approach  is  more  efficient  than  previous  approaches  and  viable 
for  larger  circuits  than  previous  approaches. 

2  Preliminaries 

2.1  The  Problem 

A  general  sequent ial  eirrnit  consists  of  a  combinational  logic  block  and 
feedback  registers  that,  hold  the  state  information.  The  problem  of  se¬ 
quential  lest  generation  involves  finding  primary  input  sequences  which 
call  excite  the  fault  and  propagate  its  effect  to  the  primary  outputs. 
It  is  assumed  that  the  present  state  and  the  next  state  lines  are  nei¬ 
ther  contwtlable  nor  observable .  The  following  assumptions  are  made 
regarding  the  sequential  circuit  to  be  tested. 

1.  The  machine  is  assumed  to  have  a  reset  state.  /?.  All  lest  vectors 
are  applied  with  this  state  as  the  starting  slate. 

2.  The  fault  model  is  assumed  to  be  single  stuck-at. 

3-  The  memory  elements  are  considered  as  distinrl  logir  primitives 
and  faults  inside  the  memory  elements  are  not  considered.  However, 
all  faults  on  present  stale  ami  next  slate  lines  are  considered. 

To  detect  a  fault  in  a  sequential  machine,  the  machine  lias  to  be  first 
placed  in  a  state  which  can  excite  the  fault  and  propagate  its  effect  to 
the  primary  output  or  the  next  stale  lines.  If  the  fault  is  not  propa¬ 
gated  to  the  primary  outputs,  then  another  sequence  of  input  vectors 
is  necessary  to  propagate  the  fault  to  the  primary  outputs.  Thus  un¬ 
like  combinational  test  generation,  sequential  test  generation  requires 
multiple  vector  test  sequences. 

it  has  been  shown  [5]  that  a  fault  in  a  general  sequential  circuit  may 
require  a  test  sequence  of  up  to  4"  input  lest  vectors,  where  n  is  the 
number  of  memory  elements  in  the  machine.  This  shows  that  the  search 
space  for  sequential  test  generation  is  very  large.  To  add  to  the  com¬ 
plexity,  some  faults  in  the  circuit  may  be  redundant:  i.e..  they  cannot 
lie  detected  by  any  test  sequence.  Since  such  faults  are  very  dilficiill  to 
identify,  large  amounts  of  effort  can  be  spent  in  trying  to  generate  tests 
for  them. 

2.2  Definitions 

A  State  is  a  bit  vector  of  length  equal  to  the  number  of  memory  elements 
(latches  or  flip-flops)  in  the  sequent  ial  circuit.  A  stale  with  only  0s  and 
is  as  bit  values  is  called  a  minterm  state.  In  general,  a  slate  is  a  cube: 
i.e.,  tile  values  in  the  different  bit  positions  may  be  0.  I  or  r  (don't  care). 

A  state  is  said  to  cover  another  state  if  the  value  of  each  bit  po¬ 
sition  in  the  first  stale  is  either  an  i  or  is  equal  to  the  value  of  the 
corresponding  bit  position  in  the  second  stale. 

For  the  combinational  logic  ill  the  sequential  circuit.,  there  are  p  pri¬ 
mary  inputs,  n  present  stale  and  next  stale  lines,  and  q  primary  outputs. 
The  combinational  logic  implements  a  multiple-output  Boolean  funct  ion 
/  :  flr+,‘  —  B,+”.  Each  of  the  primary  outputs  or  next  state  lines  are 
single  output  functions  of  p  +  n  variables.  The  ON-set.  A'o.v  C  B1'*". 
of  a  primary  output  or  next  stale  line  is  the  set  of  input  values  such 
that  primary  output  or  next  stale  line  is  1.  Similarly  the  OFF-set. 
Xoff  C  Br+".  is  the  set  of  input  values  for  which  the  corresixnuling 
line  is  0.  The  set  of  cubes  C,  is  said  to  be  a  cover  for  a  ON-set.  if 
Xok  C  C  and  C  does  not  intersect  Xoff- 

A  space  can  lie  enumerated  by  exhaustively  searching  a  set  of 
cubes  which  add  up  to  the  universal  cube  corresponding  to  that  spare. 
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Minterm  enumeration  implies  dial  each  culie  searched  is  a  mililerni. 
Mull e nil  enumeration  of  an  u-tlimensional  space  implies  that  2n  combi- 
nalions  base  been  searched.  Implicit  enumeration  involves  exliaus- 
tiveh  searching  an  n-diniensioual  space  via  cubes  sucli  that  tlie  number 
of  ciilies  searched  is  significantly  less  Ilian  2". 

An  edge  in  the  Stale  Transition  Graph  is  said  lo  be  corrupted  by  a 
sl  uck-al  fault  if  the  efTrcl  of  the  fault  can  be  propagated  to  the  primary 
out  puls  or  next  slate  lines  by  the  input  veclor  corresponding  to  the 
edge  with  the  present  stale  lines  set  to  the  fan-in  state  of  the  edge.  All 
input  vector  to  the  combinational  logic  part  of  t lie  machine  that  excites 
and  propagates  the  effect  of  the  fault  to  the  primary  output  or  the  next 
stale  lines  is  called  the  excitation  vector  for  the  fault.  The  present 
stale  pari  of  the  input  vector  is  the  state  whose  fanout  edge  is  corrupted 
by  die  fault,  and  is  called  the  excitation  state. 

The  process  of  finding  an  input  sequence  which  lakes  the  machine 
from  die  reset  stale  to  the  fault  excitation  state  is  called  state  justi¬ 
fication.  The  corresponding  input  sequence  is  called  die  justification 
sequence  and  sei  of  slates  traversed  during  justification  constitute  the 
justification  path.  State  justification  may  be  forward  state  justifica- 
I ion  or  backward  state  justification,  depending  on  whether  the  search 
is  conducted  from  the  resei  stale  to  the  excitation  state  or  vice  versa. 

In  a  sequential  circuit,  a  fault  ntav  be  redundant,  i.e..  untestable. 
There  are  two  kinds  of  redundancies  [9|  in  a  sequential  circuit  —  combi¬ 
national  redundancies  and  sequential  redundancies.  For  a  com- 
binationaliy  redundant  fault,  the  effect  of  the  fault  cannot  be  prop¬ 
agated  lo  the  primary  outputs  or  the  next  state  lines,  beginning  from 
am.  s’nb. .  v,ith  any  input  vector.  A  sequentially  redundant  fault  is 
a  fault  that  cannot  be  propagated  to  the  primary  outputs  in  4"  time 
frames  beginning  from  the  reset  state  of  tile  machine. 

3  Global  Strategy  for  Test  Generation 

information  about  state  transitions  in  sequential  machines  are  tradi¬ 
tionally  represented  using  graphs.  It  is  also  possible  to  represen!  this 
information  by  the  ON-sels  and  OFF-sets  of  all  the  next  state  lines  and 
the  primary  outputs.  Connectivity  can  be  represented  by  the  ON  and 
OFF-sets  of  the  next  state  lines  alone. 

The  first  step  in  test  generation  is  the  enumeration  of  the  partial  or 
complete  (memory  and  t'Pl!  time  permitting)  ON  and  OFF-sets  of  each 
of  the  next  slate  (NS)  lines  and  primary  out  puls  (POs)  in  the  sequential 
circuit  to  he  tested-  Cover  enumeration  is  done  via  a  PODEM-based 
or  DALG-based  [1-1)  enumeration  algorithm.  A  limit  on  the  number 
of  eulves  in  each  ON  or  OFF-set  can  be  placed.  This  limit  is  used  to 
restrict  the  amount  of  memory  and  CPF  time  used  for  enumeration. 
Cover  enumeration  is  generally  very  fast  aud  full  covers  of  moderately 
large  circuits  can  be  extracted  easily. 

Given  the  complete  (or  partial)  covers,  test  generation  is  a  three-step 
process.  These  three  steps  consist  of  ( 1 )  combinational  lest  generation 
for  a  fault  treating  the  present  state  (PS)  lines  also  as  primary  inputs 
(Pis)  and  the  NS  lines  also  as  POs.  (2)  fault-free  state  justification  and 
(3)  fault-free  state  differentiation. 

After  combinational  lest  generat  ion,  the  excitation  vector  is  examined 
to  see  if  the  present  state  part  of  the  excitation  vector  covers  the  reset 
state.  For  this  discussion,  assume  that  the  excitation  state  is  a  minterm 
state.  If  the  excitation  state  is  the  reset  state,  then  the  fault  can  be 
excited  from  the  reset  state  of  the  machine,  if  not,  then  the  excitation 
state  is  justified  using  a  backward  justification  algorithm.  Backward 
justification  is  done  by  first  finding  all  the  fan-in  states  of  the  excitation 
state,  via  repeated  cube  intersection.  If  tlie  reset,  stale  is  a  member  of 
tlie  set  of  fan-in  states,  then  a  one  vector  justification  sequence  is  found. 
Else,  the  process  is  repeated  for  somr  state  in  the  fan-in  of  the  state 
being  currently  justified.  Once  a  justification  sequence  is  found,  it  is 
fault  simulated  to  see  if  the  required  state  is  justified.  If  the  required 
state  is  justified,  then  the  justification  sequence  is  a  proper  justification 
sequence  in  the  faulty  machine  too.  If  the  required  state  is  not  justi¬ 
fied.  then  some  edge  in  the  justification  path  must  have  been  corrupted. 
A  part  of  the  justification  sequence  can  then  be  used  as  a  justification 
sequence  for  the  stale  whose  fanout  edge  was  corrupted  by  the  fault. 
State  differentiation  can  then  he  done  between  the  corresponding  true 
and  faulty  states.  We  thus  have  to  perform  only  one  fault-free  justifica¬ 
tion  to  obtain  a  true  faulty  stale  pair. 

If  tlie  effect  of  the  fault  under  test  lias  been  propagated  to  the  primary 
outputs  by  the  combinational  test  vector,  and  if  the  excitation  state  can 
be  justified  in  the  faulty  machine,  then  a  successful  test  for  the  fault 
lias  been  generated,  if.  however,  the  effect  of  the  fault  is  propagated 
only  to  tlie  next  state  lines,  then  tlie  fault  has  to  be  propagated  to 
some  primary  output  by  state  differentiation.  This  is  done  by  first 
finding  an  input  vector  that  produces  a  different  output  on  at  least 
one  primary  output  line  for  the  true  and  tlie  faulty  states.  Such  a 
vector  constitutes  a  single- vector  differentiation  sequence  between  tlie 
true  and  faulty  states.  If  a  single-vector  differentiation  sequence  cannot 


be  found,  all  the  fanout  states  of  the  true  and  faulty  stales  are  found  v  ia 
repeated  rube  intersections.  Then,  for  each  pair  of  fanout  slates  a  single- 
vector  differential  ion  sequence  is  sought  (we  are  searching  for  an  overall 
two-vector  differentiation).  If  no  such  pair  exisis.  then  a  pair  of  stales 
fanning  out  from  some  fanout  slate  pair  is  picked  aud  differential  ion 
between  this  pair  is  attempted.  The  different iat ion  sequence  obtained 
is  valid  under  fault  free  condition.  After  the  differentiation  sequence  is 
obtained,  the  entire  test  sequence  is  fault  simulated  to  see  if  the  fault 
under  test  is  delected.  Experimental  evidence  indicates  that  more  Ilian 
95%  of  the  time,  a  test  vector  sequence  generated  is  actually  a  test  for 
tlie  fault. 

As  in  some  romhinai ional  test  generators  [I]  anil  in  some  sequential 
test  generators  (If)],  ive  have  addl'd  a  random  lest  vector  generation 
procedure  as  a  front  end  to  the  determinisl ir  lest  generation  algorithm. 
Random  vector  lest  generation  enables  us  lo  delect  some  of  the  easy  lo 
detect  faults  without  much  effort  and  therefore  reduces  test  generation 
time. 

By  checking  lo  see  if  the  justification  sequence  is  valid,  prior  to  stale 
differentiation,  we  obviate  the  need  for  generating  more  than  one  justi¬ 
fication  sequence  in  each  pass  of  the  algorithm. 

All  justification  sequence  and  differentiation  sequences  generated  are 
stored  for  use  later.  Thus  parts  of  the  State  Transition  Graph  (ST(.») 
that  are  required  for  test  generation  are  explicitly  enumerated.  Enu¬ 
meration  of  only  the  required  parts  of  the  STG  gives  rise  to  significant 
memory  and  CPU  time  savings. 

4  Cover  Extraction  and  Combinational 
Test  Generation 

The  input  to  the  program  is  the  combinational  logic  specification  of 
the  finite  state  machine,  with  the  latch  inputs  and  outputs  properly 
identified.  For  each  primary  output  and  next  «»ale  line,  the  ON-set 
and  OFF-set  are  derived  by  setting  the  corresponding  line  to  a  I  or  0 
and  using  PODEM  [7]  to  implicitly  enumerate  the  input  combinal ions 
that  can  set.  tlie  line  to  a  1  or  0.  Since  on  every  Iwcktrack  PODEM 
sets  an  input  line  to  a  value  different  from  what  it  had  previously,  the 
cover  of  tlie  ON  and  OFF-sets  are  guaranteed  to  be  single  cube  con¬ 
tainment  minimal.  For  almost  all  examples,  covers  are  of  tractable  size 
and  enumeration  takes  a  very  small  fraction  of  the  total  test  generation 
time. 

Given  a  fault  for  which  a  test  sequence  is  to  be  generated,  the  first 
step  in  sequential  test  generation  is  to  generate  a  combinational  test 
veclor  for  the  fault  -  the  circuit  is  considered  to  be  combinational  with 
inputs  being  the  Pis  and  the  PS  lines  and  the  outputs  being  the  POs 
and  NS  lines.  A  cube  test  vector  is  generated  using  as  many  don’t  care 
entries  in  tlie  present  slate  part  as  possible.  This  is  done  because  stale 
justification  is  easier  for  states  represented  by  large  cul>es.  Combina¬ 
tional  test  generation  is  !>ased  on  the  decision  tree  concept  of  tlie  test 
pattern  generation  algorithm  PODEM.  It.  uses  the  9- valued  simulation, 
as  in  STALLION.  The  fault  is  first  excited  by  setting  the  faulty  wire  to 
a  value  different  from  the  faulty  value.  At  first,  this  value  is  justified 
by  setting  some  of  the  inputs  to  the  combinational  logic  block.  The 
algorithm  then  tries  to  propagate  the  effect  of  the  fault  to  the  primary 
outputs,  failing  which  it  tries  to  propagate  the  effect  of  the  fault  to  the 
next  state  lines.  If  the  fault  is  combinationally  redundant,  then  the 
effect  of  tlie  fault  cannot  be  propagated  to  either  the  NS  or  PO  lines. 
Since  the  goal  is  to  generate  a  maximal  cube  for  the  PS  lines,  all  NS 
and  PO  lines  may  not  be  set  to  a  1  or  0  at  the  end  of  test  generation 
ome  lines  may  still  be  left  unknown. 

’fa  new  test  lias  to  be  generated  !>ecause  the  previous  excitation  slate 

^  .  not  be  justified,  then  tlie  new  excitation  state  should  be  disjoint 

the  previous  excitation  stale.  Thus  Tor  a  |>arlicular  fault,  each 
k»i  generated  has  an  excitation  state  which  is  disjoint  from  all  previous 
excitation  states  for  the  fault. 

5  Justification 

Combinational  test  generation  produces  a  test  vector  with  as  many  don’t 
care  entries  in  the  present  state  part  as  possible.  Any  state  in  the  group 
of  states  5|  corresponding  to  tlie  excitation  states  for  the  fault  has  to 
be  justified.  If  the  reset  state  R  is  already  covered  by  5j,  then  the  fault 
can  be  excited  from  the  reset,  state  and  a  justification  sequence  is  not 
needed. 

The  state  justification  algorithm  first  attempts  to  find  a  single  vector 
justification  sequence  from  the  reset  state  R  of  the  machine  to  any  of 
the  stales  (minterms)  in  S|.  If  complete  covers  of  the  next  state  lines 
are  available,  the  entire  fan  in  of  Si  can  be  found  via  cube  intersections. 
S i  is  represented  as  a  bit- vector  with  0.  1  and  r  entries.  If  the  position 
corresponding  to  a  PS  line  has  a  1  (0).  the  ON-set  (OFF-set)  of  the 
corresponding  NS  line  is  picker!.  Bit  positions  with  r’s  are  ignored. 


The  intersection  of  the  ON  ami  OFF-sots  of  the  NS  lines  with  Os  and 
Is  gi\e*  the  tan i n  edges  (both  PI  ami  PS  vectors)  to  the  stales  in  5j. 
The  intersection  can  be  computed  dynamically,  checking  eacli  cube,  c, 
produced  to  see  if  the  PS  part  of  1  lie  cube  covers  the  reset  state  ft.  If 
such  a  cube(s)  is  found,  a  single  vector  justification  sequence  from  ft  to 
Si  is  obtained,  corresponding  to  t  he  PI  pari  of  the  cube  c. 

If  no  such  cube  is  found,  then  it  means  that  a  single  vector  justi¬ 
fication  sequence  does  not  exist  for  any  of  the  states  in  S|.  Thus  an 
N-vecior  sequence  with  .V  >  I  has  to  be  found.  This  is  done  by  heuris- 
ticall>  select  ing  a  group  of  slates  S?  which  exist  in  the  faniu  of  S’,  and 
at  tempting  to  justify  some  state  in  S?.  via  a  single  vector  justificat  ion 
sequence-  While  inspecting  each  cube  c  former  I  from  the  intersection 
of  the  ON  ami  OFF-sels.  tfie  large  at  cube  (cube  with  most  don't  care 
entries)  that  is  disjoint  from  5j  and  which  is  not  already  in  the  poten¬ 
tial  justification  path  is  picked  to  be  5?.  D is joi illness  is  required,  since 
if  S2  C  ,5*|.  then  we  know  that  a  single  vector  justification  sequence 
does  not  exist  for  52-  Also,  the  new  state  selected  should  not  be  in  the 
potential  justification  path  built  so  far,  inorder  to  prevent  cycles  during 
just  ifical  ion. 

The  justification  sequence  that  is  constructed  is  valid  under  fault-free 
conditions,  amt  ma>  be  invalid  under  faulty  conditions.  If  a  justification 
sequence  is  invalid  under  faulty  conditions,  it  means  t hat  the  effect 
of  t lie  fault  has  already  been  propagated  to  the  NS  lines  or  the  POs. 
Empirical  evidence  has  shown  that  over  99%  of  t he  lime,  in  real  circuits, 
a  justification  sequence,  valid  in  a  fault-free  machine,  is  also  valid  in  the 
faulty  machine  or  is  in  itself  a  test  sequence  for  the  fault.  In  t  lie  unlikely 
event  that  a  justification  sequence  is  neither  valid  in  the  faulty  machine 
nor  a  test  sequence  in  itself,  we  obtain  a  valid  justification  sequence 
from  the  invalid  one  as  described  earlier. 

All  cubes  are  represented  as  bit  vectors  which  makes  storage  and 
operations  on  cubes  very  efficient.  Cube  and  cover  data  structures  used 
are  similar  to  those  used  ill  ESPRESSO  I3|.  Using  proper  bit  notations 
for  Os.  Is  ami  j*‘s.  cube  intersection  can  be  performed  by  bitwise  AND 
operations,  which  can  be  done  very  efficiently.  A  cube  is  therefore  a 
collection  of  unsigned  integers  whose  bits  represent  the  value  of  the 
corresponding  variable.  The  cubes  in  each  cover  are  ordered  so  that  the 
cubes  that  cover  the  reset  state  are  before  those  that  do  not.  Amongst 
cubes  that  cover  the  reset  state,  the  larger  ones  are  placed  before  the 
smaller  ones.  This  helps  in  finding  a  fan  in  state  that  covers  tiie  reset 
state  as  early  as  possible. 


6  State  Differentiation 

This  step  is  only  required  if  the  initial  combinational  lest  vector  gener¬ 
al  ed  for  the  fault  under  test  propagates  the  effect,  of  the  fault  to  the  NS 
lines  alone. 

Typicallv.  in  sequential  test  pattern  generators,  a  propagation  se¬ 
quence  that  propagates  the  effect  of  the  fault  to  the  POs.  is  found  using 
a  te«t  generation  algorithm  like  PODEM.  on  multiple  time-frames  (or 
clock  cycles)  using  the  iterative-array  model  [5j.  The  first  vector  in  this 
sequence  propagates  the  effect  of  the  fault  to  the  POs  or  the  NS  lines. 
Since  the  fault  is  present  in  each  time-frame,  propagation  from  the  PS 
lines  of  the  second  time-frame  to  t he  POs  of  the  second  time-frame  is  at¬ 
tempted  under  faulty  conditions  (to  take  into  account  the  multiple-fault 
effect ). 

We  believe,  from  our  experience  with  fault-free  justification,  that  gen¬ 
eral  ing  a  propagat  ion  sequence  (in  an  iterative  array  model  of  the  se¬ 
quential  circuit)  where  only  the  logic  in  the  first  time-frame  contains  the 
fault  would  result  in  a  propagation  sequence  that  is  almost  always  valid 
under  faulty  conditions  (i.e.  the  fault  is  present  in  all  time-frames). 
Arising  from  this  observation,  we  propose  a  method  of  fault-free  stale 
differentiation,  given  the  test  vector  that  propagates  the  effect  of  the 
fault  to  the  NS  fines. 

After  justification,  the  faulty  fault-free  state  pair  (s[T,  *|~)  given  by 
the  test  vector  have  to  be  differentiated,  and  s \F  are  guaranteed  to 
differ  in  at  least  one  bit.  Some  entries  in  S\T  and  SjF  may  be  unknown 
values.  This  means  t  hat  in  I  lie  general  case,  groups  of  slates  may  have 
to  be  differentiated,  rather  than  a  minterm  state  pair. 

State  differential  ion  can  be  performed  using  the  partial  or  complete 
covers  of  the  POs  and  the  NS  lines.  The  procedure  for  single- vector 
differentiation  is  as  follows: 

1.  Pick  a  (new)  output. 

2.  Inspect  the  covers  of  the  ON-set  and  OFF-set  of  the  output  and 
search  for  an  PI  combination,  i i.  which  appears  concatenated  with 
sjr  (or  e  3  s\T)  in  the  ON-set  and  concatenated  with  siF  (or 
c  D  *iF)  in  the  OFF-set  (or  vice  versa).  If  such  an  input  combina¬ 
tion  is  found  for  some  output,  then  a  fault-free  state  differentiation 
sequence  can  be  constructed.  Exit  with  the  iuput  combination.  If 
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Table  1:  Statistics  for  Example  Circuits 


not,  a  single- vector  stale  different  iation  sequence  cauuol  be  found 
for  (.«/.  .i,F). 

Multiple- vector  differentiation  sequence*  can  be  searched  for  in  the  fol¬ 
lowing  fashion.  A*  is  llir  number  of  vectors  in  the  current  sequence. 

3.  A*  =  1. 

4.  Pick  a  NS  line  and  attempt  to  find  an  PI  vector,  i  \ .  that  produces 
a  1  (0)  when  concatenated  with  s  and  a  0  (1)  when  concatenated 
with  .  Try  another  NS  line  if  a  vector  cannot  be  found  for  «lie 
picked  one.  If  an  input  combination  cannot  be  found  for  any  such 
NS  line,  then  a  state  differentiation  sequence  cannot  be  found  for 
(*,vT.  ssF). 

5.  Find  Hie  state  |>air  (*/v+,T.  J\  +  ( F )  given  In  lire  fanonl  stales  of 
the  PI  vector  is  for  Ihc  stale  pair  (s,v T .  s \ r ).  X  =  X  +  I. 
Attempt  to  find  a  single  vector  propagation  sequence  for  the  stale 
pair  (*.„+, r.  *s*lF)- 

The  algorithm  thus  attempts  to  find  a  single  vector  sequence,  then  a 
two- vector  sequence  and  so  on.  The  NS  lines  are  selected  in  a  heuristic 
order  that  uses  topological  information  as  to  the  location  of  the  fault 
with  respect  to  the  different  NS  lines  and  POs. 


7  Identification  of  Redundant  Faults 

The  difficulty  in  sequential  test  generation  lies  not  only  in  the  generation 
of  difficult  to  delect  but  testable  faults,  but  also  in  t  lie  identification  of 
redundant  faults.  Low  fault  coverage  on  certain  exam  pies  does  not  nec¬ 
essarily  mean  that  the  test  generator  is  inadequate,  if  it  can  be  shown 
that  the  fault  coverage  is  close  lo  the  maximum  possible  value.  In  gen¬ 
eral.  identification  of  redundant  faults  require  astronomical  amounts  of 
CPU  time,  as  the  total  search  space  ha*  to  be  enumerated  before  a 
fault  can  be  pronounced  redundant.  As  defined  in  Section  2.  there  are 
two  classes  of  redundant  fault  -  combinationally  redundant  and  sequen¬ 
tially  redundant.  Combinationally  redundant  faults  are  detected  during 
combinational  test  generation,  ami  are  easier  to  find  than  sequentially 
redundant  fault. 

It  is  possible  to  detect  a  subset  of  the  sequentially  redundant  faults 
using  Theorem  1  of  [9].  We  use  the  same  theorem  for  the  detection  of 
sequentially  redundant  faults.  However,  since  we  do  not  use  the  Slate 
Transition  Graph  of  the  machine,  the  conditions  of  Theorem  1  are  ver¬ 
ified  differently.  A  state  (or  group  of  stales)  cannot  be  justified  if  the 
total  number  of  fan-in  cul>es  determined  during  the  justificat  ion  proce¬ 
dure  is  zero.  An  unjustifiable  slate  is  a  state  that  cannot  be  reached  in 
the  true  machine  (invalid  state).  We  generate  all  possible  tests  for  the 
fault,  with  disjoint  initial  states.  If  all  of  the  initial  stales  have  no  fan-in 
cubes  after  intersection.  then  the  fault  under  test  is  redundant.  In  the 
next  section,  we  show  that  this  new  method  ran  establish  redundancy 
for  a  larger  fraction  of  faults  than  the  method  of  (9). 

8  Test  Generation  Results  Using  STEED 

The  test  generation  algorithm  described  in  the  previous  section  have 
been  implemented  in  the  program  STEED.  It  consists  of  about  10.000 
lines  of  C  code  and  runs  in  a  VAX-VNIX  environment. 

Results  and  time  profiles  using  STEED  for  eleven  finite  state  machines 
which  are  described  in  Table  1  are  given  in  Tables  2  and  3,  respectively, 
lit  Table  4,  comparisons  are  drawn  aaainst  STALLION  [9]  and  the  test 

f;enerator,  CONTEST,  described  in  [2].  In  the  tables  m  and  a  stands 
or  minutes  and  seconds,  respectively.  For  eacli  example  in  Table  |.  the 
number  of  inputs  (#iup).  number  of  outputs  (#oul ).  number  of  gates 
legate),  number  of  latches  (#lat),  and  number  of  equivalent  faults 
(#eqv.  faults)  are  indicated. 
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fault-fret*  slate  differential  ion.  The  effirnc\  of  our  method  stems  from 
(he  efficient  use  of  covers  of  the  ON  ami  OI  F  sets  of  the  primary  out¬ 
put  and  next  stale  lines  instead  of  the  ST(J.  for  state  just ilirat ion  and 
differentiation.  Experimental  results  indicate  that  faults  that  require 
a  long  input  sequences  arc  handled  efficiently.  We  ha\e  successful!) 
generated  tests  Tor  finite  stale  machines  with  a  large  number  of  latches 
within  reasonable  amounts  of  (TV-  time  and  )ia\e  obtained  Hose  u, 
maximum  amount  of  fault  coverage.  We  have  also  demonstrated  that 
our  algorithms  require  significant ly  smaller  time  than  the  lest  generator 
described  in  (f)]  and  [2]  while  maintaining  or  improving  fault  coverage. 
It  was  also  demonstrated  l-lial  a  larger  class  of  sequentially  redundant 
faults  can  be  determined  during  test  generation. 


Table  2:  Test  Generation  Results  for  Circuits 
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Table  3:  Time  Profiles  for  Example  Circuit 


In  Table  2.  the  number  of  test  sequences  (#test  seq.),  the  total  num¬ 
ber  of  test  vectors  (#vect),  the  maximum  test  sequence  length  (max. 
seq.  len).  the  percentage  when  a  potential  test  sequence  generated  for 
a  fault  actually  detected  the  fault  (%succ).  the  fault  coverage,  the  per¬ 
centage  of  provably  redundant  faults  (using  the  redundancy  procedure) 
.  the  total  fault  coverage  including  detected  and  provably  redundant 
faults  (tfc).  and  the  CPF  time  on  a  VAX  11/8800  are  indicated  for  each 
example. 

CPF  times  for  enumeration  of  covers,  justification,  differentiation,  to¬ 
tal  test  generation,  fault  simulation  and  miscellaneous  setup  operations 
and  for  i  he  entire  test  generation  process  are  given  in  Table  3. 

In  Table  4.  total  test  generation  time  and  fault  coverage  of  STALLION 
[9).  CONTEST  [2]  and  STEED  are  compared.  As  can  be  seen,  our 
lest  generation  technique  obtains  close  to  the  maximum  possible  fault 
coverage  in  all  the  examples.  It  takes  significantly  smaller  time  than 
STALLION  [9j  and  CONTEST  [2]  to  achieve  the  same  fault  coverage. 
For  the  large  examples,  very  significant  speed-ups  were  obtained. 

The  fraction  of  time  spent  in  cover  enumeration  is  very  small,  much 
smaller  than  the  corresponding  time  required  for  even  partial  STG  enu¬ 
meration  in  STALLION,  lest  generation  times  are  in  most  cases  small, 
and  fault  simulation  dominates  the  total  test  generation  time  in  most 
cases.  It  is  worthwhile  to  note  that  the  success  rate,  i.e.  the  percentage 
of  Times  that  a  potential  test  sequence  is  valid,  is  100%  for  the  largest 
examples.  For  t he  examples  sbe  and  key.  which  have  huge  STGs, 
STALLION  is  unable  to  establish  sequential  redundancy  for  faults,  but 
STEED  can. 

The  results  for  STALLION  shown  in  this  paper  have  been  derived 
using  a  newer  and  improved  version  of  the  program  that  uses  better 
fault  collapsing  and  hierarchical  enumeration.  Thus,  the  results  quoted 
in  this  paper  do  not  agree  with  those  in  [9). 


9  Conclusions 

A  novel  approach  to  test  generation  for  sequential  circuits  have  been 
presented  in  this  paper.  We  have  developed  an  efficient  deterministic 
algorithm  for  test  generation  that  uses  fault-free  state  justification  and 
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Table  4:  Comparisons  With  STALLION  and  CONTEST 
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